Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93438E80DA9411EFBE29729F762E951A.roa
File: 93438E80DA9411EFBE29729F762E951A.roa (raw, json)
Hash identifier: kScX62WyrBmWPuTMUDkPlrhH5I+IdiYTF9TtBKgwpC8=
Subject key identifier: 65:81:F1:1F:E4:D9:5D:5C:D2:B7:CC:33:10:D2:C4:8F:D7:9E:08:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01108E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93438E80DA9411EFBE29729F762E951A.roa
Signing time: Fri 24 Jan 2025 20:48:33 +0000
ROA not before: Fri 24 Jan 2025 20:48:30 +0000
ROA not after: Tue 25 Feb 2025 20:48:30 +0000
asID: 202656
IP address blocks: 45.199.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69774 (0x1108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:48:30 2025 GMT
Not After : Feb 25 20:48:30 2025 GMT
Subject: CN=6793fca1-e193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:af:40:1b:00:12:8c:f5:08:36:d8:2d:85:
0b:d4:68:25:05:b3:aa:99:0a:af:ab:89:91:77:1a:
6e:83:b0:bb:a0:95:1c:93:32:cd:a8:d4:24:af:cd:
37:dc:80:65:b0:6f:92:0a:51:ca:35:b6:45:a2:01:
73:df:4b:a3:9a:1b:18:02:95:7d:44:b1:b1:cc:ca:
2e:9f:3e:ec:85:59:37:73:cf:67:ec:d0:a7:15:94:
cc:68:b3:73:63:d6:f5:ee:41:12:88:1b:e3:b8:17:
77:69:78:11:9a:93:9a:b2:90:f0:ca:79:c2:f1:98:
26:2e:cf:5d:66:4e:cf:56:b9:6b:f2:6a:5e:c9:bc:
55:4b:ec:55:6b:ee:d7:2c:b0:f6:c2:0a:8b:1c:95:
d5:57:6b:0d:ab:ef:08:f6:8f:95:63:20:d9:d5:54:
96:de:8d:3e:a6:39:cf:97:88:81:6a:fc:72:98:8a:
cf:5f:c2:5b:10:3c:34:6e:5c:4e:50:f7:e5:78:7e:
af:0a:60:f2:b8:18:54:a8:69:4b:71:90:fc:a0:35:
88:99:d9:9b:9a:f2:1f:12:d5:e8:28:16:3e:d5:c1:
3a:73:b2:c6:c9:f4:ce:f9:15:27:47:c7:17:98:e5:
3e:58:ce:6b:f8:e8:9b:b3:ed:c8:c7:b7:82:84:c2:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:F1:1F:E4:D9:5D:5C:D2:B7:CC:33:10:D2:C4:8F:D7:9E:08:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93438E80DA9411EFBE29729F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.195.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a4:df:10:35:05:77:c8:c7:9a:83:6a:98:ed:b1:7d:13:9d:
dd:95:72:9b:c9:6b:f6:64:3b:30:2e:c1:15:2f:b2:33:00:1a:
3d:b3:73:1e:46:71:1d:e4:6a:72:27:44:96:bd:2b:40:8d:8b:
3b:86:83:26:bc:6e:6d:b9:3d:cd:91:d5:7d:be:b3:9f:77:f7:
e1:a7:6c:0f:05:2d:02:49:d0:96:02:6c:9a:42:ea:aa:4f:d7:
de:d6:d4:39:ae:64:ba:0a:df:52:52:17:6b:21:af:b2:a3:b8:
9d:34:38:52:54:5b:55:ee:3f:14:8c:ff:21:55:77:43:14:0e:
14:80:69:40:8e:e7:9a:3a:01:d8:7e:fd:fb:6f:1a:1a:26:8a:
87:f6:c2:fe:e1:10:d4:f3:34:11:b7:88:bc:54:52:2f:fa:cc:
59:a9:9e:9c:b8:60:b8:fa:53:fc:e5:43:7d:1a:d5:2e:6f:28:
c5:94:f1:b4:4c:e9:87:f8:50:d6:1e:fa:08:0a:15:60:75:c9:
3a:c9:0c:b0:b8:a4:89:0a:7d:54:a2:9b:98:a6:97:e6:93:c4:
86:80:1b:e0:2f:ca:4d:97:f2:e8:1b:3c:4b:b3:01:fd:11:ea:
81:0d:b9:e8:1d:7f:77:e8:55:04:da:ef:78:b3:df:06:08:4e:
73:5c:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:02:18 2025 by rpki-client